$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332323a3a2f34382d3438203d3e20323138363638.roa File: 323630323a663932613a313332323a3a2f34382d3438203d3e20323138363638.roa (raw, json) Hash identifier: NQakIdlS1dxu+8k8hSOLgCHPMvLdckxF15WY5hdzTwc= Subject key identifier: 5C:37:EE:F0:73:1B:85:10:1B:A5:7F:FE:3D:3B:A9:EA:B3:CF:1D:60 Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Certificate serial: 1AC7FCD28771C16FBEEDA3FECB265E76E401539F Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332323a3a2f34382d3438203d3e20323138363638.roa Signing time: Sun 11 Oct 2026 00:41:31 +0000 ROA not before: Sun 11 Oct 2026 00:36:31 +0000 ROA not after: Sun 10 Oct 2027 00:41:31 +0000 asID: 218668 IP address blocks: 2602:f92a:1322::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 04:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c7:fc:d2:87:71:c1:6f:be:ed:a3:fe:cb:26:5e:76:e4:01:53:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8 Validity Not Before: Oct 11 00:36:31 2026 GMT Not After : Oct 10 00:41:31 2027 GMT Subject: CN=5C37EEF0731B85101BA57FFE3D3BA9EAB3CF1D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:65:bc:2f:9e:47:bc:68:d3:16:31:29:be:9e: fa:cb:e6:34:eb:f6:37:a3:ed:84:8f:43:1a:4a:d3: 5a:f5:a1:09:b0:20:3e:f1:4c:5d:33:77:93:28:57: 65:5e:dd:53:55:eb:8f:5a:f4:25:64:b7:d7:1b:e1: 09:7b:18:03:5f:87:29:3d:b3:c0:ea:cf:3a:e2:af: 06:0f:85:78:84:c9:b0:2c:87:a1:95:f8:fc:a0:0d: 69:f3:e2:db:f5:47:fd:bd:95:b1:d2:ec:9e:47:69: 42:7e:f2:9d:29:41:44:a8:96:09:4e:c1:51:a7:47: 36:13:94:8e:e2:63:2d:e3:d1:ee:60:5f:2e:1d:cd: ba:ba:e2:d8:24:1c:4d:f9:9d:5a:a6:c3:3d:0a:9a: 84:28:64:f1:10:f5:cb:57:37:82:13:59:1c:d8:fa: bd:23:a3:ca:17:52:fc:cd:b7:cf:69:b6:d6:21:8f: e8:b2:3c:00:c4:9f:66:c4:ef:b1:8c:0d:92:ac:43: 8a:83:e8:e1:8e:b2:a2:a1:66:af:a7:a5:55:60:a2: 39:ae:a9:c3:48:9c:b8:2b:ed:1a:f0:dd:ae:e0:2d: 59:e5:80:be:84:b8:da:b8:f9:ee:53:95:1b:26:77: 87:46:db:9a:63:01:e1:ab:8c:1d:8e:fd:64:a3:a9: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:37:EE:F0:73:1B:85:10:1B:A5:7F:FE:3D:3B:A9:EA:B3:CF:1D:60 X509v3 Authority Key Identifier: keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332323a3a2f34382d3438203d3e20323138363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f92a:1322::/48 Signature Algorithm: sha256WithRSAEncryption 79:2c:4c:15:21:d9:52:02:96:6f:9d:50:25:31:f8:3b:08:f3: b4:9f:76:90:4a:f7:36:32:a3:1c:ae:91:10:93:dc:06:9f:c1: 3d:80:ff:8b:fe:92:2c:05:ce:73:6c:2e:19:65:e5:ea:6f:64: 46:d9:ed:f3:ef:da:fd:93:3a:49:30:7a:9e:6c:69:28:57:d7: f9:aa:01:ad:1c:ef:25:5c:af:1f:79:a9:7a:2a:ae:77:7b:7b: a6:3c:80:47:9b:a5:06:63:b8:51:82:c1:6b:8e:ba:9b:14:19: d2:9c:ed:4a:1c:9c:c6:d6:07:29:bb:b8:f8:4c:bc:4e:66:ef: a7:ba:c3:90:c1:db:b0:e4:bd:a7:57:15:19:dc:9e:59:4f:75: f6:48:1e:7f:d0:28:49:0a:db:a9:16:49:6f:10:3c:9e:26:e0: cf:b8:d9:45:f4:8a:92:06:90:71:1a:79:af:19:81:e9:f7:33: b1:a8:0e:f9:ce:07:43:27:73:78:de:0c:4f:52:93:42:51:6e: f9:10:ef:ba:99:fb:68:8d:51:87:b7:d6:3c:4b:96:04:16:88: c1:a9:34:3c:56:e7:56:0e:8c:41:cb:58:87:26:9e:85:68:07: 2b:71:29:aa:47:05:f8:6d:a1:4f:57:20:c4:40:3f:cd:2f:b4: ee:25:ab:49 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUGsf80odxwW++7aP+yyZeduQBU58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4 ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYxMDExMDAzNjMxWhcNMjcxMDEwMDA0MTMx WjAzMTEwLwYDVQQDEyg1QzM3RUVGMDczMUI4NTEwMUJBNTdGRkUzRDNCQTlFQUIz Q0YxRDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52W8L55HvGjT FjEpvp76y+Y06/Y3o+2Ej0MaStNa9aEJsCA+8UxdM3eTKFdlXt1TVeuPWvQlZLfX G+EJexgDX4cpPbPA6s864q8GD4V4hMmwLIehlfj8oA1p8+Lb9Uf9vZWx0uyeR2lC fvKdKUFEqJYJTsFRp0c2E5SO4mMt49HuYF8uHc26uuLYJBxN+Z1apsM9CpqEKGTx EPXLVzeCE1kc2Pq9I6PKF1L8zbfPabbWIY/osjwAxJ9mxO+xjA2SrEOKg+jhjrKi oWavp6VVYKI5rqnDSJy4K+0a8N2u4C1Z5YC+hLjauPnuU5UbJneHRtuaYwHhq4wd jv1ko6mkmwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFFw37vBzG4UQG6V//j07qeqz zx1gMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4 NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy M2E2NjM5MzI2MTNhMzEzMzMyMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx MzgzNjM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqEyIwDQYJKoZIhvcNAQELBQADggEBAHks TBUh2VIClm+dUCUx+DsI87SfdpBK9zYyoxyukRCT3AafwT2A/4v+kiwFznNsLhll 5epvZEbZ7fPv2v2TOkkwep5saShX1/mqAa0c7yVcrx95qXoqrnd7e6Y8gEebpQZj uFGCwWuOupsUGdKc7UocnMbWBym7uPhMvE5m76e6w5DB27DkvadXFRncnllPdfZI Hn/QKEkK26kWSW8QPJ4m4M+42UX0ipIGkHEaea8Zgen3M7GoDvnOB0Mnc3jeDE9S k0JRbvkQ77qZ+2iNUYe31jxLlgQWiMGpNDxW51YOjEHLWIcmnoVoBytxKapHBfht oU9XIMRAP80vtO4lq0k= -----END CERTIFICATE-----Generated at Thu Oct 22 11:53:43 2026 by rpki-client